Configure bastion host integration

Choose how P0 connects to your Azure VMs — through an Azure Bastion host or a custom jump host — to enable secure SSH access.

Once you configure IAM management, you can enable secure SSH access to VMs in your Azure environment. This requires two parts:

Bastion host configuration under the Azure integration (this page and its subpages)
SSH access setup under Integrations → SSH

When you configure the component, you choose how P0 connects to your virtual machines (VMs) to provision access. You select the connection type per subscription when you add the subscription.

Complete IAM management before starting this step. The Bastion host configuration depends on the IAM permissions set up in the previous step.

Connection types

P0 supports two ways to reach your VMs. Each has its own requirements, permissions, and setup steps, covered on its own page.

Connection type

Description

Custom role required

Azure bastion host

P0 provisions SSH access through a managed Azure Bastion host.

Yes — P0 creates and holds the role

Custom jump host

P0 connects through a virtual machine behind a virtual network that acts as a jump host.

Yes — you grant a role to connecting users

Which to choose

Choose Azure bastion host when you already run an Azure Bastion host, or want P0 to manage SSH sessions through Azure's managed Bastion service.
Choose Custom jump host when you route SSH through your own VM behind a virtual network and want your users to connect over Azure IAM.

How the connection works

P0 installs Bastion host configuration per subscription. Each subscription that needs SSH access must have the component configured. When you add a subscription, you select how P0 connects: through an Azure bastion host or through a custom jump host.